As far as I'm aware (not a lawyer) you must provide a easy opt-out from data collection and usage, plus you must not force your employees into such agreements[1]. ChatGPT already got blocked over GDPR issues, and with new regulations coming forward I really don't see how they think this can be the right call.
1. https://commission.europa.eu/law/law-topic/data-protection/r...